Browser security company Menlo Security Inc. has announced the launch of the Menlo IRIS Browser Extension, a new product designed to integrate enterprise browser security controls into the browsers that employees are already using, eliminating the need for transitioning to separate secure browsers.
Menlo IRIS is delivered as a centrally managed extension and is designed to provide security teams with visibility and control over the use of generative artificial intelligence, data movement, files, and third-party extensions. The company states that installation can be completed in just a few hours, as it does not require any additional hardware.
Bill Robbins, Chief Executive Officer, who succeeded co-founder Amir Ben-Efraim in February, noted that security teams have long recognized that web browsers represent a security blind spot. Despite this awareness, many have hesitated to address the issue due to the challenges associated with replacing existing security stacks, often resulting in extensive migration projects.
“Menlo IRIS removes those obstacles,” Robbins emphasized. “Even a small team can rapidly implement essential security on the browsers that employees already use.”
To strengthen its case, Menlo cited findings from Verizon Communications Inc.’s 2026 Data Breach Investigations Report, released in May, which indicated a dramatic increase in the use of AI on corporate devices—from 15% to 45% of employees within a year. Additionally, it was reported that 67% of individuals accessing AI services on corporate devices were using noncorporate accounts, and over 15% of users at the average company were found to be utilizing unauthorized AI browser extensions.
The Menlo IRIS extension includes a comprehensive audit of third-party browser extensions, offering an inventory of all extensions installed throughout the organization, along with real-time risk profiling and management controls. According to Menlo, many security teams do not maintain an accurate count of the extensions their users have installed. The company further warned that the risk profile of an extension can change unexpectedly at any time.
To mitigate data loss, Menlo IRIS features controls for the clipboard, printing, uploads, and downloads. Additional measures include watermarking, read-only pages, restrictions on developer tools, and deterrents against screenshots. Web filtering directs users toward approved tools, including generative AI services, with data entry restrictions as a means of control rather than outright bans on these tools.
The solution also includes file security capabilities, such as inline inspection for data loss prevention violations, viruses, and malware. For customers seeking enhanced security, options for content disarm and reconstruction are available to remove malicious content from files while keeping them operable. An optional add-on, HEAT Shield AI, is also provided for protection against zero-day phishing, social engineering, and malvertising at the moment of the click.
Deployment of Menlo IRIS can be accomplished via the Chrome Web Store, Microsoft Intune, Jamf, or other device management platforms, with support for browsers including Chrome, Edge, Safari, Firefox, and other Chromium-based AI browsers. Since there is no need for browser switching, ongoing security patches from each browser vendor can continue to reach users as usual.
The majority of controls are enforced directly within the browser session, which the company claims eliminates the necessity for a proxy to route traffic. Menlo IRIS is designed to complement existing network and endpoint security tools.
The Menlo IRIS Browser Extension is now available for use.
To date, Menlo Security has secured $250 million in funding, including a notable $100 million round in November 2020. Key investors include Vista Equity Partners Management, JPMorgan Chase & Co., American Express Ventures, and General Catalyst Group Management.